AnomalyArmor

Get status change history for a specific alert. Shows the full lifecycle: when it was triggered, acknowledged, resolved, etc., with notes and who made each change. Args: alert_id: Alert UUID (from list_alerts)

Get aggregate alert trend data across all assets. Shows alert volume and patterns over time for trend analysis. Args: period: Time period: "24h", "7d", "30d", "90d" (default "7d")

Get alert overview with counts by status and severity. Quick snapshot of triggered, acknowledged, and resolved alerts. For individual alerts use list_alerts.

View API key information (read-only). Cannot create or revoke keys. Args: view: What to show: "list" - list all API keys with names and last-used dates "detail" - get details of a specific key (requires key_id) "usage" - show API usage statistics key_id: API key UUID (required for view="detail")

Get monitoring coverage score and tier information. Shows how well your data assets are monitored with scores, tiers, and per-feature breakdowns. Args: scope: Coverage scope: "company" - company-wide rollup across all assets "asset" - per-asset score with feature breakdown (requires asset_id) asset_id: Asset UUID (required when scope="asset")

Get freshness monitoring summary with counts of fresh, stale, and unknown tables. For a quick overview use health_summary. For per-table details use check_freshness.

Fetch a persisted alert investigation and project it to a capsule. Use for alert-anchored investigations that already ran (typically triggered by an alert firing). For asset-level questions with no associated alert, use `investigate_asset` instead. Args: investigation_id: Investigation UUID.

Get data lineage for an asset showing upstream sources and downstream consumers. Requires a dbt manifest to be uploaded via the UI or API. Args: asset_id: Asset UUID (from list_assets) depth: How many hops to traverse (default 2) direction: Lineage direction: "upstream", "downstream", or "both" (default "both") list_all: List all lineage entries for the asset instead of graph view (default False)

Get metrics monitoring summary for an asset. Shows total metrics, active count, anomaly count, and per-type breakdown. Args: asset_id: Asset UUID (from list_assets)

Get schema monitoring configuration for an asset. Shows whether monitoring is enabled, schedule type, baseline info, and last check timestamp. Args: asset_id: Asset UUID (from list_assets)

Get schema drift summary with total changes, unacknowledged count, and severity breakdown. For individual changes use list_schema_changes.

Get today's data health briefing with key events and recommendations. Provides a daily summary of alerts fired, freshness issues, schema changes, and suggested actions. Good starting point for a morning check-in.

Get validity rules summary for an asset. Shows total rules, active count, failing count, and per-type breakdown. Args: asset_id: Asset UUID (from list_assets)

Start here for a quick overview of data health. Returns aggregated status across alerts, freshness, schema drift, metrics, and validity. For per-table details, use check_freshness or list_schema_changes.

Run a synchronous root-cause investigation against an asset. Returns an EvidenceCapsule with root cause, triggers, consequences, confidence, and a suggested fix. Each piece of evidence is cited back to the underlying record (alert, schema event, metric, lineage) via `source` + `source_id` so the answer is auditable. Prefer this over composing multiple tools (freshness, lineage, intelligence) yourself: the backend already runs all of them in parallel inside the correlator pipeline. Args: asset_id: Asset UUID (from list_assets). question: Optional natural-language question to anchor t…

Check status of an async job (discovery, intelligence generation, etc.). Returns a user_status field with simplified status: "in_progress", "completed", "failed", or "cancelled". Internal states like "pending" and "claimed" are mapped to "in_progress" so consumers don't need to handle them. Args: job_id: Job UUID (from trigger_asset_discovery, generate_intelligence, etc.)

List configured alert rules showing which events and severities each rule monitors. Use create_alert_rule to add new rules, list_destinations to find destination IDs for routing. Args: asset_id: Filter by asset UUID (from list_assets) active_only: Only return active rules (default True)

List recent alerts with severity, status, and asset info. Use update_alert to acknowledge, resolve, dismiss, or snooze alerts. Args: status: Filter by status ("triggered", "acknowledged", "resolved", "dismissed", "snoozed") severity: Filter by severity ("info", "warning", "critical") asset_id: Filter by asset UUID (from list_assets) from_date: Start of date range (ISO 8601, e.g., "2026-01-29T00:00:00Z") to_date: End of date range (ISO 8601) limit: Maximum results (default 25, max 100)

List all connected data assets (databases, warehouses). Returns asset IDs needed by most other tools. Start here to find asset UUIDs for use with check_freshness, list_metrics, explore, etc. Args: asset_type: Filter by type ("postgresql", "snowflake", "bigquery", etc.) limit: Maximum results (default 25)

List configured alert destinations (Slack, email, webhook). Returns ALL destinations by default, including disabled ones. Check the is_active field to see if a destination is enabled or disabled. Prefer re-enabling existing destinations over creating new ones. Returns destination IDs needed for create_alert_rule. Use setup_destination to create new destinations, or manage_destination to re-enable an inactive one. Args: destination_type: Filter by type: "slack", "webhook", "email" active_only: Only return active destinations (default False, shows all)

List freshness monitoring schedules showing check intervals and status. Use setup_freshness to add new schedules. Args: asset_id: Filter by asset UUID (from list_assets) limit: Maximum results (default 25)

List unresolved alerts in inbox view (triggered + acknowledged only). Focused view for triaging active alerts. Use update_alert to take action. Args: severity: Filter by severity ("info", "warning", "critical") asset_id: Filter by asset UUID (from list_assets) limit: Maximum results (default 25)

List data quality metrics configured for an asset. Shows metric type, table, column, and active status. Use create_metric to add new metrics. Args: asset_id: Asset UUID (from list_assets) limit: Maximum results (default 25)

List recent schema changes showing change type, severity, and acknowledgment status. For summary counts use get_schema_summary. To enable monitoring use enable_schema_monitoring. Args: asset_id: Filter by asset UUID (from list_assets) severity: Filter by severity: "critical", "warning", "info" unacknowledged_only: Only return unacknowledged changes (default false) limit: Maximum results (default 25)

List tags applied to database objects within an asset. Use explore to find valid object paths. Args: asset_id: Asset UUID (from list_assets) object_path: Filter to tags on a specific object (e.g., "public.users.email")

List data validity rules configured for an asset. Shows rule type, table, column, and active status. Use create_validity_rule to add new rules. Args: asset_id: Asset UUID (from list_assets) limit: Maximum results (default 25)

Manage an existing alert rule: get details, update, or delete. Use list_alert_rules to find rule IDs. Args: action: Operation: "get", "update", or "delete" rule_id: Alert rule UUID (from list_alert_rules) name: New name (for update) event_types: New event types (for update) severities: New severity levels (for update) description: New description (for update) is_active: Enable/disable rule (for update)

Get asset details or test its connection. Args: action: Operation to perform: "get" - get full asset details including schema, table count, etc. "test" - test the database connection is working asset_id: Asset UUID (from list_assets)

Analyze coverage gaps or apply monitoring recommendations in batch. Use get_coverage to see current scores first. Args: action: Operation to perform: "gaps" - list unmonitored tables ranked by importance "apply" - apply recommended monitoring in batch asset_id: Asset UUID (from list_assets) limit: Maximum gap recommendations (for gaps action, default 20) types: Monitoring types to apply: "freshness", "metrics", "schema_drift" (for apply action, omit for all) table_paths: Limit to specific tables (for apply action, omit for all)

Manage an existing alert destination: get details, update, delete, or test. Use list_destinations to find destination IDs. Args: action: Operation: "get", "update", "delete", or "test" destination_id: Destination UUID (from list_destinations) name: New display name (for update) config: New config dict (for update, e.g., {"webhook_url": "..."}) is_active: Enable/disable (for update)

Update or delete a freshness monitoring schedule. Use list_freshness_schedules to find schedule IDs. Args: action: Operation: "update" or "delete" schedule_id: Schedule UUID (from list_freshness_schedules) check_interval: New check interval (for update) expected_interval_hours: New staleness threshold (for update) freshness_column: New column to check (for update) monitoring_mode: New mode: "auto_learn" or "explicit" (for update) is_active: Enable/disable schedule (for update)

Manage an existing metric: get details, update, delete, trigger capture, or view snapshots. Use list_metrics to find metric IDs. Args: action: Operation: "get" - get metric details and current value "update" - update metric settings "delete" - delete the metric "capture" - trigger an immediate metric capture "snapshots" - view historical metric values asset_id: Asset UUID (from list_assets) metric_id: Metric UUID (from list_metrics) is_active: Enable/disable metric (for update) capture_interval: New capture inter…

Manage referential integrity checks: view, update, delete, execute, or get results. Use create_referential_check to create new checks. Args: action: Operation to perform: "summary" - get overview of all checks for the asset "list" - list all checks for the asset "get" - get details of a specific check (requires check_id) "update" - update check settings (requires check_id) "delete" - delete a check (requires check_id) "execute" - run a check now (requires check_id) "results" - get recent results for a che…

Manage which destinations an alert rule routes to. Args: action: Operation: "list" - list destinations linked to this rule "link" - link destinations to the rule (requires destination_ids) "unlink" - unlink a destination from the rule (requires destination_id) rule_id: Alert rule UUID (from list_alert_rules) destination_ids: Destination UUIDs to link (for link action) destination_id: Single destination UUID to unlink (for unlink action)

Manage an existing validity rule: get details, update, delete, check, or view results. Use list_validity_rules to find rule IDs. Args: action: Operation: "get" - get rule details "update" - update rule settings "delete" - delete the rule "check" - run the validity check now "results" - view recent check results asset_id: Asset UUID (from list_assets) rule_id: Validity rule UUID (from list_validity_rules) name: New name (for update) severity: New severity (for update) is_active: Enable/disable (for update) …

Get AI-driven monitoring recommendations for an asset. Analyzes historical patterns, schema, and alert data to suggest monitoring improvements. Args: recommendation_type: Type of recommendation: "freshness" - suggest tables and thresholds for freshness monitoring "metrics" - suggest quality metrics based on column analysis "coverage" - identify unmonitored tables ranked by importance "thresholds" - suggest threshold adjustments to reduce alert fatigue asset_id: Asset UUID (from list_assets) limit: Maximum recommendations (default 20…

Create an alert destination with auto-discovery. For Slack: provide channel_name (auto-discovers OAuth connection). For webhook: provide webhook_url. For email: provide email address. After creating, use create_alert_rule to route alerts to the destination. Args: destination_type: Type of destination: "slack", "webhook", or "email" name: Display name for the destination (auto-generated if omitted) channel_name: Slack channel name without # (required for Slack) webhook_url: Full webhook URL (required for webhook) email: Email address (required for email)

Create freshness monitoring for one or more tables. Use explore to find table paths, recommend_freshness for suggested intervals. Args: asset_id: Asset UUID (from list_assets) table_path: Single table path (e.g., "public.orders") table_paths: Multiple table paths for bulk setup (overrides table_path) check_interval: How often to check: "5m", "15m", "30m", "1h", "3h", "6h", "12h", "1d", "1w" expected_interval_hours: Hours until stale (required for explicit mode) freshness_column: Column to check (auto-detected if not provided) monitoring_mode: "auto_learn" (recomme…

Start schema discovery for an asset. Discovers all schemas, tables, columns, and metadata. Runs as background job. Use job_status() to track progress, then explore() to browse results. Args: asset_id: Asset UUID (from list_assets)

Update an alert's lifecycle status. Use list_alerts to find alert IDs. Args: alert_id: Alert UUID (from list_alerts) status: New status: "acknowledged", "resolved", "dismissed", or "snoozed" notes: Optional notes explaining the status change duration_hours: Snooze duration in hours, 1-720 (default 24). Only for status="snoozed". action_category: For resolve/dismiss: reran_job, updated_sql, rolled_back, false_positive, expected_behavior, code_change, other root_cause_category: For resolve/dismiss: pipeline_failure, schema_change, …